Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c2c7687-38b3-3632-bad6-6df400e97b35.roa
File: 3c2c7687-38b3-3632-bad6-6df400e97b35.roa (raw, json)
Hash identifier: YwCUlRCb2CJngKOljHdly8iAvKN/CRg2rFAvTmcIkJE=
Subject key identifier: 70:44:91:8D:AA:3C:98:97:23:26:92:26:08:B5:6F:5F:F5:B6:24:F1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6F75DE085B45D434D5FDC400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c2c7687-38b3-3632-bad6-6df400e97b35.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.204.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:75:de:08:5b:45:d4:34:d5:fd:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=5fae246a-ceae-46a8-817c-9d3a06e726b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:88:78:9d:89:f0:c1:25:54:ed:81:14:1f:
08:56:c5:ee:bb:77:7a:8c:b1:17:38:2c:fa:d7:27:
ff:57:7b:2b:0a:6f:e1:58:12:5d:a2:38:cb:cd:23:
81:82:4a:ba:b1:f4:fd:ee:13:9e:5c:47:65:cf:19:
2f:f2:22:02:d7:6f:89:c7:c9:a6:7b:2f:6c:83:31:
c3:4e:b7:22:e5:14:c0:08:c7:f7:e1:cb:d6:49:10:
94:ba:0c:b8:55:42:de:f9:86:63:7b:12:82:b9:e0:
d5:58:ff:6f:3b:d9:1b:87:70:a2:6b:b5:88:05:fb:
b3:2d:81:57:f4:45:33:ed:f7:bb:b3:53:4e:f9:b8:
3f:5e:87:16:14:03:9e:f5:f2:ca:64:94:dc:b4:aa:
68:42:c4:e7:a4:22:31:6e:49:82:60:64:4d:a8:62:
ac:1f:b0:79:60:9b:9e:a7:c5:44:72:bb:2b:01:1f:
14:57:33:70:cf:d0:e4:78:27:32:97:de:62:e9:e1:
dc:ca:08:bf:3e:1d:00:66:8a:8e:b1:81:d5:df:eb:
51:94:6a:f0:d5:b2:a7:59:16:75:3d:a7:9e:19:e5:
eb:5d:e4:9a:a7:c9:b1:42:2d:10:da:ae:69:7b:c1:
08:5a:67:e7:9b:16:bf:45:bc:4d:fb:08:65:82:7c:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:91:8D:AA:3C:98:97:23:26:92:26:08:B5:6F:5F:F5:B6:24:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c2c7687-38b3-3632-bad6-6df400e97b35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.204.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:9f:ce:ff:9c:66:2e:37:f2:f0:f7:4f:b7:bc:ca:47:cf:1a:
90:8f:d2:e5:fb:70:2d:b7:dd:0f:1d:4c:a4:3a:8b:b4:12:76:
62:0f:ed:a9:8c:6e:bf:a4:19:eb:fe:ae:dd:06:23:47:5b:f8:
0d:72:c7:4b:e2:77:d5:ef:bb:63:4b:11:a0:ea:ee:4f:8f:52:
99:8a:d5:fb:14:f0:c9:a4:21:8e:ed:77:e4:fb:fd:09:6d:75:
0b:99:d2:34:a6:34:60:98:22:99:31:42:cc:1f:99:25:0b:5f:
e4:a3:89:3b:f6:a4:f9:b1:42:9b:79:66:db:e4:32:45:58:f6:
66:62:ec:d5:18:8c:7f:85:4a:b7:52:82:1e:a2:8e:59:e9:02:
53:58:c1:e9:29:69:df:8c:c1:48:ca:a5:32:69:51:ba:b9:72:
fc:5d:4d:9b:8c:39:ba:38:09:0d:4c:b4:fc:64:6d:4f:8e:69:
b3:89:90:0f:19:70:d0:73:27:47:04:8f:52:2c:ca:1f:a8:dc:
76:2b:5d:8e:6e:61:1b:1a:8b:b1:e2:93:9b:a1:35:e2:f7:46:
b0:a2:fc:e9:5c:9a:cd:cf:a4:c6:cb:8d:fe:41:4c:23:56:a6:
70:5c:02:c4:75:83:29:f0:a5:2c:fa:83:f3:65:34:bb:98:31:
54:89:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:19 2025 by rpki-client